#libexpat — Public Fediverse posts

🔎 CVE-2025-59375: HIGH severity in libexpat (<2.7.2) — attackers can remotely exhaust system memory via crafted small XML docs, causing DoS. Patch to 2.7.2+ or mitigate with input controls. https://radar.offseq.com/threat/cve-2025-59375-cwe-770-allocation-of-resources-wit-82d0797d #OffSeq #Vuln #libexpat #InfoSec

🔎 CVE-2025-59375: HIGH severity in libexpat (<2.7.2) — attackers can remotely exhaust system memory via crafted small XML docs, causing DoS. Patch to 2.7.2+ or mitigate with input controls. https://radar.offseq.com/threat/cve-2025-59375-cwe-770-allocation-of-resources-wit-82d0797d #OffSeq #Vuln #libexpat #InfoSec

🔎 CVE-2025-59375: HIGH severity in libexpat (<2.7.2) — attackers can remotely exhaust system memory via crafted small XML docs, causing DoS. Patch to 2.7.2+ or mitigate with input controls. https://radar.offseq.com/threat/cve-2025-59375-cwe-770-allocation-of-resources-wit-82d0797d #OffSeq #Vuln #libexpat #InfoSec

#libexpat 2.7.1 has been released (#Expat / #XML / #CVE / #SecurityVulnerability) https://libexpat.github.io/

#libexpat 2.7.1 has been released (#Expat / #XML / #CVE / #SecurityVulnerability) https://libexpat.github.io/

#libexpat 2.7.1 has been released (#Expat / #XML / #CVE / #SecurityVulnerability) https://libexpat.github.io/

Recursion kills: The story behind CVE-2024-8176 in libexpat

https://blog.hartwork.org/posts/expat-2-7-0-released/

#HackerNews #Recursion #libexpat #CVE20248176 #security #vulnerability #programming

Recursion kills: The story behind CVE-2024-8176 in libexpat

https://blog.hartwork.org/posts/expat-2-7-0-released/

#HackerNews #Recursion #libexpat #CVE20248176 #security #vulnerability #programming

Recursion kills: The story behind CVE-2024-8176 in libexpat

https://blog.hartwork.org/posts/expat-2-7-0-released/

#HackerNews #Recursion #libexpat #CVE20248176 #security #vulnerability #programming

Recursion kills: The story behind CVE-2024-8176 in libexpat

https://blog.hartwork.org/posts/expat-2-7-0-released/

#HackerNews #Recursion #libexpat #CVE20248176 #security #vulnerability #programming

There are several security vulnerabilities in #XAMPP (#Apache #ApacheHTTPd #PHP #Perl #MySQL #MariaDB #OpenSSL #phpMyAdmin #Curl #Tomcat #libexpat), I have done the official announcement, please share! (#ApacheFriends #Bitrock #Bitnami #VMware #Broadcom) https://github.com/Neustradamus/xampp

There are several security vulnerabilities in #XAMPP (#Apache #ApacheHTTPd #PHP #Perl #MySQL #MariaDB #OpenSSL #phpMyAdmin #Curl #Tomcat #libexpat), I have done the official announcement, please share! (#ApacheFriends #Bitrock #Bitnami #VMware #Broadcom) https://github.com/Neustradamus/xampp

There are several security vulnerabilities in #XAMPP (#Apache #ApacheHTTPd #PHP #Perl #MySQL #MariaDB #OpenSSL #phpMyAdmin #Curl #Tomcat #libexpat), I have done the official announcement, please share! (#ApacheFriends #Bitrock #Bitnami #VMware #Broadcom) https://github.com/Neustradamus/xampp

There are several security vulnerabilities in #XAMPP (#Apache #ApacheHTTPd #PHP #Perl #MySQL #MariaDB #OpenSSL #phpMyAdmin #Curl #Tomcat #libexpat), I have done the official announcement, please share! (#ApacheFriends #Bitrock #Bitnami #VMware #Broadcom) https://github.com/Neustradamus/xampp

There are several security vulnerabilities in #XAMPP (#Apache #ApacheHTTPd #PHP #Perl #MySQL #MariaDB #OpenSSL #phpMyAdmin #Curl #Tomcat #libexpat), I have done the official announcement, please share! (#ApacheFriends #Bitrock #Bitnami #VMware #Broadcom) https://github.com/Neustradamus/xampp

Oh, my! https://libexpat.github.io/doc/users/ yes, many of these projects are insignificant or obsolete, but what remains! If these got broken! Oh, sh*! #FLOSS #libexpat #SBOM #vulnerability #XML

Oh, my! https://libexpat.github.io/doc/users/ yes, many of these projects are insignificant or obsolete, but what remains! If these got broken! Oh, sh*! #FLOSS #libexpat #SBOM #vulnerability #XML

Oh, my! https://libexpat.github.io/doc/users/ yes, many of these projects are insignificant or obsolete, but what remains! If these got broken! Oh, sh*! #FLOSS #libexpat #SBOM #vulnerability #XML

Oh, my! https://libexpat.github.io/doc/users/ yes, many of these projects are insignificant or obsolete, but what remains! If these got broken! Oh, sh*! #FLOSS #libexpat #SBOM #vulnerability #XML

Oh, my! https://libexpat.github.io/doc/users/ yes, many of these projects are insignificant or obsolete, but what remains! If these got broken! Oh, sh*! #FLOSS #libexpat #SBOM #vulnerability #XML

Unpopular opinion: If your hobby is responsible for running the modern world, you deserve to be paid a living wage for running it.

#xz #expat #libexpat

Unpopular opinion: If your hobby is responsible for running the modern world, you deserve to be paid a living wage for running it.

#xz #expat #libexpat

Unpopular opinion: If your hobby is responsible for running the modern world, you deserve to be paid a living wage for running it.

#xz #expat #libexpat

Unpopular opinion: If your hobby is responsible for running the modern world, you deserve to be paid a living wage for running it.

#xz #expat #libexpat

Unpopular opinion: If your hobby is responsible for running the modern world, you deserve to be paid a living wage for running it.

#xz #expat #libexpat

Any experienced C developers among my followers? #BoostsWelcome.

Expat, arguably the world's most popular #XML parser, is understaffed and without funding. As #xz has shown, situations like this are dangerous.

Last month, maintainer Sebastian Pipping put up a plea for help at https://github.com/libexpat/libexpat/blob/R_2_6_2/expat/Changes

(I would help myself, but my C skills barely surpass "Hello, World".)

Found via @timbray - https://cosocial.ca/@timbray/112203547801373427

#libexpat
#SoftwareSupplyChainSecurity #OpenSource #OpenSourceMaintainer
#C

Any experienced C developers among my followers? #BoostsWelcome.

Expat, arguably the world's most popular #XML parser, is understaffed and without funding. As #xz has shown, situations like this are dangerous.

Last month, maintainer Sebastian Pipping put up a plea for help at https://github.com/libexpat/libexpat/blob/R_2_6_2/expat/Changes

(I would help myself, but my C skills barely surpass "Hello, World".)

Found via @timbray - https://cosocial.ca/@timbray/112203547801373427

#libexpat
#SoftwareSupplyChainSecurity #OpenSource #OpenSourceMaintainer
#C

Any experienced C developers among my followers? #BoostsWelcome.

Expat, arguably the world's most popular #XML parser, is understaffed and without funding. As #xz has shown, situations like this are dangerous.

Last month, maintainer Sebastian Pipping put up a plea for help at https://github.com/libexpat/libexpat/blob/R_2_6_2/expat/Changes

(I would help myself, but my C skills barely surpass "Hello, World".)

Found via @timbray - https://cosocial.ca/@timbray/112203547801373427

#libexpat
#SoftwareSupplyChainSecurity #OpenSource #OpenSourceMaintainer
#C

Any experienced C developers among my followers? #BoostsWelcome.

Expat, arguably the world's most popular #XML parser, is understaffed and without funding. As #xz has shown, situations like this are dangerous.

Last month, maintainer Sebastian Pipping put up a plea for help at https://github.com/libexpat/libexpat/blob/R_2_6_2/expat/Changes

(I would help myself, but my C skills barely surpass "Hello, World".)

Found via @timbray - https://cosocial.ca/@timbray/112203547801373427

#libexpat
#SoftwareSupplyChainSecurity #OpenSource #OpenSourceMaintainer
#C

Any experienced C developers among my followers? #BoostsWelcome.

Expat, arguably the world's most popular #XML parser, is understaffed and without funding. As #xz has shown, situations like this are dangerous.

Last month, maintainer Sebastian Pipping put up a plea for help at https://github.com/libexpat/libexpat/blob/R_2_6_2/expat/Changes

(I would help myself, but my C skills barely surpass "Hello, World".)

Found via @timbray - https://cosocial.ca/@timbray/112203547801373427

#libexpat
#SoftwareSupplyChainSecurity #OpenSource #OpenSourceMaintainer
#C

Контр-пример: нашли UAF - исправили UAF, а не “замылили” ошибку карантином.

OpenBSD 7.1 errata 010, September 23, 2022:

In libexpat fix heap use-after-free vulnerability CVE-2022-40674.

#security #c #uaf #libexpat

P.S. У всех пользователей #OpenBSD отличный повод запустить syspatch